Re: [Add] New Version Notification for draft-reddy-add-enterprise-split-dns-01.txt

Paul Vixie <paul@redbarn.org> Fri, 02 April 2021 08:18 UTC

Return-Path: <vixie@redbarn.org>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00E463A382C for <add@ietfa.amsl.com>; Fri, 2 Apr 2021 01:18:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bi9hXAiTuG1t for <add@ietfa.amsl.com>; Fri, 2 Apr 2021 01:18:11 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [24.104.150.213]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F35D53A382A for <add@ietf.org>; Fri, 2 Apr 2021 01:18:10 -0700 (PDT)
Received: by family.redbarn.org (Postfix, from userid 716) id 9CF297599B; Fri, 2 Apr 2021 08:18:07 +0000 (UTC)
Date: Fri, 02 Apr 2021 08:18:07 +0000
From: Paul Vixie <paul@redbarn.org>
To: Ben Schwartz <bemasc=40google.com@dmarc.ietf.org>
Cc: tirumal reddy <kondtir@gmail.com>, ADD Mailing list <add@ietf.org>, Tommy Pauly <tpauly@apple.com>
Message-ID: <20210402081807.2nsq2mhdviiy7wju@family.redbarn.org>
References: <161544385340.18570.13061001177806683345@ietfa.amsl.com> <CAFpG3geAq9oTEJp+uFQ_vHdATgT9Faza-tJURciO=RheLgLDug@mail.gmail.com> <CAHbrMsCK5BUNzF+8nd722R-BR612mM+3oA6x9RzoT_osHWWRzg@mail.gmail.com> <BFF52DBA-5A64-46E5-B51A-9012EF9E09BD@apple.com> <CAFpG3gcUroKr=BD+pqy7-+D48osdM3wmtEjuVP6V+Gra3BqwFA@mail.gmail.com> <CAHbrMsB0zH_0exyZYd2ZaC0NvbLdLCZZqu8o0BcRO=js5K7jeQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAHbrMsB0zH_0exyZYd2ZaC0NvbLdLCZZqu8o0BcRO=js5K7jeQ@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/j5Qjw1HJFHZYYDMc8570NUf-fHw>
Subject: Re: [Add] New Version Notification for draft-reddy-add-enterprise-split-dns-01.txt
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Apr 2021 08:18:13 -0000

On Thu, Apr 01, 2021 at 01:44:11PM -0400, Ben Schwartz wrote:
> There's no meaningful distinction between an "expression" and a
> "prescription".[1]  Whether this flag represents a demand to comply
> or a notice of enforcement, the effect is the same.[2]

you had me at [1] but lost me at [2]. there is no difference, but
neither side of "demand" vs. "notice" need be present. we express
policy for reasons of our own. those who do not follow the policy
do so at their own (unknown) risk. that's how the networks work,
of which the internet is a "network of".

> Defining a flag of this kind would amount to the IETF endorsing the
> practice of network operators demanding access to all of their users'
> DNS activity, ...

no.

> ... i.e. browsing history.

and, no.

> That's out of scope for our working group.

if both antecedents held true, then this would be at least arguable.

> It also violates RFC 8890, "The Internet is for End Users".

RFC 8890 is not an internet standard. at least one member of the IAB has
taken the time to remind me that it is an individual submission; however,
had it not been, the mere fact that it was not a POISED-style standards
action makes it an opinion piece -- no matter whose opinion we think it is.

the internet is a network of networks, and that the networks of which the
internet is a "network of" are "for" a lot of purposes, and some might be
"for the users", or perhaps "for some users". others are "for some
investors" or "for national defense" or "for national security". i do not
ordain the IAB to tell me what my networks are for, nor by extension, to
tell me what the network of such networks (that is, "the internet") is for.
for the same reason the IAB cannot dictate to me my Acceptable Use Policy
or Peering Policy or Transit Policy or Firewall Policy, they could usefully
remain silent about what _my_ purpose is for building and operating (some
of) the networks that "the internet" is a network of.

i need a clear shot at every app, every device, every user, every OS, and
apparently now every protocol, which violates my network's stated policy.
i plan to hunt down every violator and fire it or them.

because "ADD" is a radical and controversial change to default behaviour,
my need for "a clear shot" has been placed very exactly in-scope.

-- 
Paul Vixie